Fix starlette vulnerability

Author: six5532one

requirements/base.txt

@@ -1,16 +1,16 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
-#    pip-compile --config=pyproject.toml requirements/base.in
+#    pip-compile requirements/base.in
 #
 aiofiles==24.1.0
     # via unstructured-client
 annotated-types==0.7.0
     # via pydantic
 antlr4-python3-runtime==4.9.3
     # via omegaconf
-anyio==4.7.0
+anyio==4.8.0
     # via
     #   httpx
     #   starlette
@@ -20,9 +20,9 @@ backoff==2.2.1
     #   unstructured
 beautifulsoup4==4.12.3
     # via unstructured
-cachetools==5.5.0
+cachetools==5.5.1
     # via google-auth
-certifi==2024.8.30
+certifi==2024.12.14
     # via
     #   httpcore
     #   httpx
@@ -31,7 +31,7 @@ cffi==1.17.1
     # via cryptography
 chardet==5.2.0
     # via unstructured
-charset-normalizer==3.4.0
+charset-normalizer==3.4.1
     # via
     #   pdfminer-six
     #   requests
@@ -53,36 +53,36 @@ cycler==0.12.1
     # via matplotlib
 dataclasses-json==0.6.7
     # via unstructured
-deprecated==1.2.15
+deprecated==1.2.18
     # via pikepdf
 effdet==0.4.1
     # via unstructured
-emoji==2.14.0
+emoji==2.14.1
     # via unstructured
 et-xmlfile==2.0.0
     # via openpyxl
-eval-type-backport==0.2.0
+eval-type-backport==0.2.2
     # via unstructured-client
-fastapi==0.113.0
+fastapi==0.1.17
     # via -r requirements/base.in
-filelock==3.16.1
+filelock==3.17.0
     # via
     #   huggingface-hub
     #   torch
     #   transformers
 filetype==1.2.0
     # via unstructured
-flatbuffers==24.3.25
+flatbuffers==25.1.24
     # via onnxruntime
-fonttools==4.55.3
+fonttools==4.55.7
     # via matplotlib
-fsspec==2024.10.0
+fsspec==2024.12.0
     # via
     #   huggingface-hub
     #   torch
-google-api-core[grpc]==2.24.0
+google-api-core[grpc]==2.24.1
     # via google-cloud-vision
-google-auth==2.37.0
+google-auth==2.38.0
     # via
     #   google-api-core
     #   google-cloud-vision
@@ -92,11 +92,11 @@ googleapis-common-protos==1.66.0
     # via
     #   google-api-core
     #   grpcio-status
-grpcio==1.68.1
+grpcio==1.70.0
     # via
     #   google-api-core
     #   grpcio-status
-grpcio-status==1.68.1
+grpcio-status==1.70.0
     # via google-api-core
 h11==0.14.0
     # via
@@ -108,7 +108,7 @@ httpcore==1.0.7
     # via httpx
 httpx==0.28.1
     # via unstructured-client
-huggingface-hub==0.26.5
+huggingface-hub==0.28.0
     # via
     #   timm
     #   tokenizers
@@ -121,20 +121,16 @@ idna==3.10
     #   anyio
     #   httpx
     #   requests
-iopath==0.1.10
-    # via layoutparser
-jinja2==3.1.4
+jinja2==3.1.5
     # via torch
 joblib==1.4.2
     # via nltk
 jsonpath-python==1.0.6
     # via unstructured-client
-kiwisolver==1.4.7
+kiwisolver==1.4.8
     # via matplotlib
 langdetect==1.0.9
     # via unstructured
-layoutparser==0.3.4
-    # via unstructured-inference
 lxml==5.3.0
     # via
     #   pikepdf
@@ -145,9 +141,9 @@ markdown==3.7
     # via unstructured
 markupsafe==3.0.2
     # via jinja2
-marshmallow==3.23.1
+marshmallow==3.26.0
     # via dataclasses-json
-matplotlib==3.9.4
+matplotlib==3.10.0
     # via
     #   pycocotools
     #   unstructured-inference
@@ -167,7 +163,6 @@ numpy==1.26.4
     # via
     #   -c requirements/constraints.in
     #   contourpy
-    #   layoutparser
     #   matplotlib
     #   onnx
     #   onnxruntime
@@ -189,10 +184,8 @@ onnx==1.17.0
     #   unstructured-inference
 onnxruntime==1.20.1
     # via unstructured-inference
-opencv-python==4.10.0.84
-    # via
-    #   layoutparser
-    #   unstructured-inference
+opencv-python==4.11.0.86
+    # via unstructured-inference
 openpyxl==3.1.5
     # via unstructured
 packaging==24.2
@@ -206,40 +199,32 @@ packaging==24.2
     #   unstructured-pytesseract
 pandas==2.2.3
     # via
-    #   layoutparser
     #   unstructured
+    #   unstructured-inference
 pdf2image==1.17.0
+    # via unstructured
+pdfminer-six==20240706
     # via
-    #   layoutparser
-    #   unstructured
-pdfminer-six==20231228
-    # via
-    #   pdfplumber
     #   unstructured
-pdfplumber==0.11.4
-    # via layoutparser
+    #   unstructured-inference
 pi-heif==0.21.0
     # via unstructured
-pikepdf==9.4.2
+pikepdf==9.5.1
     # via unstructured
-pillow==11.0.0
+pillow==11.1.0
     # via
-    #   layoutparser
     #   matplotlib
     #   pdf2image
-    #   pdfplumber
     #   pi-heif
     #   pikepdf
     #   python-pptx
     #   torchvision
     #   unstructured-pytesseract
-portalocker==3.0.0
-    # via iopath
-proto-plus==1.25.0
+proto-plus==1.26.0
     # via
     #   google-api-core
     #   google-cloud-vision
-protobuf==5.29.1
+protobuf==5.29.3
     # via
     #   google-api-core
     #   google-cloud-vision
@@ -248,7 +233,7 @@ protobuf==5.29.1
     #   onnx
     #   onnxruntime
     #   proto-plus
-psutil==6.1.0
+psutil==6.1.1
     # via
     #   -r requirements/base.in
     #   unstructured
@@ -264,35 +249,35 @@ pycparser==2.22
     # via cffi
 pycryptodome==3.21.0
     # via -r requirements/base.in
-pydantic==2.9.2
+pydantic==2.10.6
     # via
     #   fastapi
     #   unstructured-client
-pydantic-core==2.23.4
+pydantic-core==2.27.2
     # via pydantic
-pypandoc==1.14
+pypandoc==1.15
     # via unstructured
-pyparsing==3.2.0
+pyparsing==3.2.1
     # via matplotlib
-pypdf==5.1.0
+pypdf==5.2.0
     # via
     #   -r requirements/base.in
     #   unstructured
     #   unstructured-client
-pypdfium2==4.30.0
-    # via pdfplumber
+pypdfium2==4.30.1
+    # via unstructured-inference
 python-dateutil==2.9.0.post0
     # via
     #   matplotlib
     #   pandas
     #   unstructured-client
 python-docx==1.1.2
     # via unstructured
-python-iso639==2024.10.22
+python-iso639==2025.1.28
     # via unstructured
 python-magic==0.4.27
     # via unstructured
-python-multipart==0.0.19
+python-multipart==0.0.20
     # via unstructured-inference
 python-oxmsg==0.0.1
     # via unstructured
@@ -303,11 +288,10 @@ pytz==2024.2
 pyyaml==6.0.2
     # via
     #   huggingface-hub
-    #   layoutparser
     #   omegaconf
     #   timm
     #   transformers
-rapidfuzz==3.10.1
+rapidfuzz==3.11.0
     # via
     #   unstructured
     #   unstructured-inference
@@ -329,12 +313,12 @@ requests-toolbelt==1.0.0
     # via unstructured-client
 rsa==4.9
     # via google-auth
-safetensors==0.4.5
+safetensors==0.5.2
     # via
     #   timm
     #   transformers
-scipy==1.14.1
-    # via layoutparser
+scipy==1.15.1
+    # via unstructured-inference
 six==1.17.0
     # via
     #   html5lib
@@ -344,13 +328,15 @@ sniffio==1.3.1
     # via anyio
 soupsieve==2.6
     # via beautifulsoup4
-starlette==0.38.6
-    # via fastapi
+starlette==0.45.3
+    # via
+    #   -c requirements/constraints.in
+    #   fastapi
 sympy==1.13.1
     # via
     #   onnxruntime
     #   torch
-timm==1.0.12
+timm==1.0.14
     # via
     #   effdet
     #   unstructured-inference
@@ -369,18 +355,15 @@ torchvision==0.20.1
 tqdm==4.67.1
     # via
     #   huggingface-hub
-    #   iopath
     #   nltk
     #   transformers
     #   unstructured
-transformers==4.47.0
+transformers==4.48.1
     # via unstructured-inference
 typing-extensions==4.12.2
     # via
     #   anyio
-    #   fastapi
     #   huggingface-hub
-    #   iopath
     #   pydantic
     #   pydantic-core
     #   python-docx
@@ -393,27 +376,30 @@ typing-inspect==0.9.0
     # via
     #   dataclasses-json
     #   unstructured-client
-tzdata==2024.2
+tzdata==2025.1
     # via pandas
-unstructured[all-docs]==0.16.11
+unstructured[all-docs]==0.16.16
     # via -r requirements/base.in
-unstructured-client==0.28.1
+unstructured-client==0.29.0
     # via unstructured
-unstructured-inference==0.8.1
+unstructured-inference==0.8.6
     # via unstructured
 unstructured-pytesseract==0.3.13
     # via unstructured
-urllib3==2.2.3
+urllib3==2.3.0
     # via requests
-uvicorn==0.32.1
+uvicorn==0.34.0
     # via -r requirements/base.in
 webencodings==0.5.1
     # via html5lib
-wrapt==1.17.0
+wrapt==1.17.2
     # via
     #   deprecated
     #   unstructured
 xlrd==2.0.1
     # via unstructured
-xlsxwriter==3.2.0
+xlsxwriter==3.2.2
     # via python-pptx
+
+# The following packages are considered to be unsafe in a requirements file:
+# setuptools

requirements/constraints.in

@@ -4,3 +4,4 @@
 # words, if something does not require a constraint, it will not be installed.
 ####################################################################################################
 numpy<2.0.0
+starlette>=0.40.0